GEICO

Disclosed Jan 29, 202471,490 affectedSettled

Quote tool abused to steal driver's license numbers; part of USD 11.3M NY penalties

Hackers exploited GEICO's online auto insurance quoting tool in an industry-wide campaign to steal driver's license numbers and birth dates, some later used for fraudulent pandemic unemployment claims. The NY AG and DFS secured USD 11.3M from GEICO and Travelers combined.

What is known

People affected	71,490 (as reported by the organization)
Disclosed	Jan 29, 2024
Discovered	Jun 1, 2023
Happened	May 27, 2023
Attack	Hacking
Data exposed	Government IDsDates of birthNames
Sector	Insurance · US
Status	Settled
Lawsuit or fine	USD 11.3M combined NY AG and DFS penalties with Travelers (Nov 2024)

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: GEICO

Official noticeatg.wa.gov

Washington Attorney General breach notice: GEICO

Regulatorag.ny.gov

NY AG: USD 11.3 Million from auto insurance companies over data breaches

Official noticein.gov

Indiana Attorney General 2024 data breach report: GEICO

Notices filed

Residents of INJan 29, 2024

Indiana AG2,327 people

Residents of WAJan 30, 2024

Washington AG1,186 people

Residents of CAJan 31, 2024

California AGCount not stated

TotalNov 25, 2024

ResearchCount not stated

History of this record

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 71490by backfillSource

disclosed2026-09-25

2024-01-30 to 2024-01-29by backfillSource

status2026-09-25

confirmed to settledby seedSource

lawsuit2026-09-25

empty to USD 11.3M combined NY AG and DFS penalties with Travelers (Nov 2024)by seedSource

sector2026-09-25

health to insuranceby seedSource

data_types2026-09-25

[] to ["government-id","dob","names"]by seedSource

summary2026-09-25

empty to Hackers exploited GEICO's online auto insurance quoting tool in an industry-wide campaign to steal driver's license numbers and birth dates, some later used for fraudulent pandemic unemployment claims. The NY AG and DFS secured USD 11.3M frby seedSource

title2026-09-25

empty to Quote tool abused to steal driver's license numbers; part of USD 11.3M NY penaltiesby seedSource

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

disclosed2026-09-25

2024-01-31 to 2024-01-30by backfillSource

discovered2026-09-25

empty to 2023-06-01by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about GEICO